If this is your first visit, be sure to
check out the Forum Rules by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

ettercap - sniffing works, but I can't see passwords

Hi everyone.

I know that the ettercap forums would be a better place for this, but it looks like they have a problem when with the registration of new users, thats why I post it here...

I use the ettercap version of BackTrack 2.0 to perform some ftp password sniffing in a my switched lab. I used the arp spoofing feature in ettercap, that works, but I can't see any passwords in ettercap

I used tcpdump and wireshark to verify that the arp spoofing works correct and I can see all the packets (in wireshark I can see the username and password of the ftp session). But the password collectors in ettercap don't work.

I don't remember specifically the solution...or if there was a solution...but the common problem has been the use of a switch on a hub. Several people have complained of ettercap failing to work on switched networks.

Well, arp-spoofing is the right means and it obviously works. I had the same "problem". Ettercap doesn't display the password with the "-q" option. If you use it without the -q option it will display the password.....besides it wil disply all the traffic.... WEIRD!

I don't remember specifically the solution...or if there was a solution...but the common problem has been the use of a switch on a hub. Several people have complained of ettercap failing to work on switched networks.

Sorry, but I can't help you any further.

By the way... the Ettercap QnA forum is back up!!!! Damn... been a LONG time since its been up